This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft File: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft (raw, json) Hash identifier: ud7ALr3c3E2l5TY3v/PYur3zE1pbth329BEVyOTmS6Q= Subject key identifier: 9A:6D:D2:40:51:D0:20:52:62:07:E8:59:50:2B:D9:E3:9A:A4:F8:69 Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Certificate serial: 019B2106E5EC0389E52A3464DC2788FC5B2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft Manifest number: 0C32 Signing time: Mon 15 Dec 2025 08:00:58 +0000 Manifest this update: Mon 15 Dec 2025 08:00:58 +0000 Manifest next update: Tue 16 Dec 2025 08:00:58 +0000 Files and hashes: 1: 6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl (hash: fybbJvP+u6WvfZfg3b9FIpJ4j+ndLnIu4gH8W5XidYI=) 2: LdRBYy0Dc5TAEL5DjhgBeOrbOd4.roa (hash: DqAe52Zea4wwRHNsVvBEFGj53/XE1pCKy+2JNBHlZFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:e5:ec:03:89:e5:2a:34:64:dc:27:88:fc:5b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb Validity Not Before: Dec 15 08:00:58 2025 GMT Not After : Dec 16 08:00:58 2025 GMT Subject: CN=9a6dd24051d020526207e859502bd9e39aa4f869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:2d:e5:89:33:c7:6d:cf:ff:bf:d9:1b:87: 4a:3d:8f:2d:c8:b5:b8:c1:f8:f3:c7:eb:cd:e7:82: 82:1b:3a:eb:9a:2e:6a:1d:0d:9e:6e:4d:92:45:81: 77:7b:55:24:26:a9:1d:b8:bf:22:76:c7:43:91:a0: 26:b5:97:86:15:84:1b:d0:55:b2:c8:ef:86:a7:54: f4:7f:e7:fe:d5:98:f9:4f:28:e6:b8:39:c6:be:8c: e4:b5:39:f2:c0:ce:42:2d:c0:4a:f9:23:ba:ee:ba: 57:40:2d:97:78:e4:07:c5:a4:8f:0a:77:b1:f2:a9: 9e:df:73:94:d5:a6:0f:65:6a:33:cc:c2:bc:bb:27: 2f:81:5b:68:f0:34:93:ef:5a:7d:a8:45:99:2e:12: fb:ec:38:46:aa:fb:c7:91:42:32:33:9a:4b:b1:0d: f2:7b:fb:cf:99:9e:0a:60:5e:36:2c:9a:25:52:e6: da:86:86:0b:05:2e:c4:04:44:4c:30:08:19:eb:df: df:2b:79:3c:d1:7a:ae:81:6a:a6:9d:8d:36:54:bc: a9:28:3c:8d:92:db:02:74:f5:5e:5f:ff:cc:bf:8b: 7e:ab:3d:3a:65:4f:c2:fd:d9:7f:86:ee:6d:15:67: da:bc:88:9d:34:6d:1e:4a:88:d5:aa:65:b4:50:ec: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6D:D2:40:51:D0:20:52:62:07:E8:59:50:2B:D9:E3:9A:A4:F8:69 X509v3 Authority Key Identifier: keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bc:a8:2c:20:7c:4f:6f:ef:b8:d6:28:3c:39:77:73:05:c5: 16:55:ce:2d:7d:6b:1b:a7:72:89:f5:dc:38:b6:8e:e0:f7:51: 2b:bf:d5:d8:1c:50:2d:c1:38:21:9a:39:52:b3:1b:79:09:2b: cf:13:56:f0:61:11:47:35:ce:29:72:3e:96:05:2c:58:fe:a0: d6:5b:e5:24:00:28:65:48:7b:30:86:1f:45:39:16:13:f9:df: ff:af:ff:e9:ec:ff:ce:2c:e6:77:88:d7:67:44:2f:d0:55:e1: b4:85:37:87:60:8c:4e:1e:5a:1a:4f:b8:8e:5f:9d:ba:a0:e4: fb:f2:d0:01:9b:68:d0:22:bd:d3:fe:32:54:ae:23:c7:ee:cf: b6:99:37:3d:a2:30:22:af:88:21:ea:7b:72:3d:ce:be:74:e9: 3f:80:40:94:5c:4a:fc:0f:72:b5:8e:b2:34:4b:3d:33:b6:b5: 65:e2:ea:78:4a:39:14:bd:5c:66:0c:a9:3c:8f:9a:65:f8:1c: e8:86:f7:6a:5d:ce:e1:73:bc:9a:98:2f:14:69:9d:5c:d9:ee: cc:5a:9f:b8:13:f3:78:a9:cb:e8:94:73:fc:87:5d:50:d5:fa: f3:f6:e2:95:b7:3f:bc:be:aa:33:00:28:c5:69:7c:a0:3e:14: 4d:18:42:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBuXsA4nlKjRk3CeI/FsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYTVhYmU5ZjczMDQzODMxOThiYTFmZmE1OTI3OTBlY2Yy YzNjZWIwHhcNMjUxMjE1MDgwMDU4WhcNMjUxMjE2MDgwMDU4WjAzMTEwLwYDVQQD Eyg5YTZkZDI0MDUxZDAyMDUyNjIwN2U4NTk1MDJiZDllMzlhYTRmODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ct5Ykzx23P/7/ZG4dKPY8tyLW4 wfjzx+vN54KCGzrrmi5qHQ2ebk2SRYF3e1UkJqkduL8idsdDkaAmtZeGFYQb0FWy yO+Gp1T0f+f+1Zj5TyjmuDnGvozktTnywM5CLcBK+SO67rpXQC2XeOQHxaSPCnex 8qme33OU1aYPZWozzMK8uycvgVto8DST71p9qEWZLhL77DhGqvvHkUIyM5pLsQ3y e/vPmZ4KYF42LJolUubahoYLBS7EBERMMAgZ69/fK3k80XqugWqmnY02VLypKDyN ktsCdPVeX//Mv4t+qz06ZU/C/dl/hu5tFWfavIidNG0eSojVqmW0UOx4EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpt0kBR0CBSYgfoWVAr2eOapPhpMB8GA1UdIwQY MBaAFOqlq+n3MEODGYuh/6WSeQ7PLDzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEt YzlkZTIyYjkxNmNhLzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mYjJhYTEtMDA0Yi00OWM0LWFhNDEtYzlkZTIyYjkxNmNh LzEvNnFXcjZmY3dRNE1aaTZIX3BaSjVEczhzUE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbyoLCB8 T2/vuNYoPDl3cwXFFlXOLX1rG6dyifXcOLaO4PdRK7/V2BxQLcE4IZo5UrMbeQkr zxNW8GERRzXOKXI+lgUsWP6g1lvlJAAoZUh7MIYfRTkWE/nf/6//6ez/zizmd4jX Z0Qv0FXhtIU3h2CMTh5aGk+4jl+duqDk+/LQAZto0CK90/4yVK4jx+7Ptpk3PaIw Iq+IIep7cj3OvnTpP4BAlFxK/A9ytY6yNEs9M7a1ZeLqeEo5FL1cZgypPI+aZfgc 6Ib3al3O4XO8mpgvFGmdXNnuzFqfuBPzeKnL6JRz/IddUNX68/bilbc/vL6qMwAo xWl8oD4UTRhCRw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:32:02 2025 by rpki-client